Senior Cybersecurity Engineer
Step into a mission-critical role at the heart of the organisation's security posture. As a Senior Cybersecurity Engineer, you will safeguard the availability, integrity, and confidentiality of all systems and networks. You'll architect defensive strategies, lead security initiatives, analyse threats, and guide the company in staying ahead of emerging risks. This position blends deep technical expertise with strategic influence—ideal for a professional who wants to shape cybersecurity at an enterprise level.
Key Accountabilities & Activities
Security Governance & Policy
- Develop, maintain, and enforce security policies, standards, and procedures.
- Ensure alignment with regulatory frameworks (e.g., PCI DSS, NIS2, GDPR).
- Lead organisation-wide security awareness programs and training.
Threat Monitoring & Incident Response
- Monitor security tools, analyse alerts, and lead investigations with root-cause analysis.
- Drive incident response activities, from detection to remediation and reporting.
- Track threat landscape developments and proactively identify emerging risks.
Risk & Compliance Management
- Conduct risk assessments and maintain visibility of the company's risk posture.
- Oversee vulnerability scans, penetration tests, and timely remediation.
- Liaise with auditors and regulators; conduct gap analyses and ensure compliance.
Security by Design & Collaboration
- Provide security requirements and feedback for new initiatives and architecture changes.
- Collaborate with technical teams to embed security across systems and processes.
- Contribute to the cybersecurity roadmap and align it with business and technology goals.
Functional & Technical Skills
- IT degree or specialised cybersecurity certifications (CISSP, CISM, CISA preferred).
- 5+ years of hands-on cybersecurity experience.
- Expertise with IDS/IPS, SIEM, WAF, vulnerability assessment tools, endpoint protection.
- Strong knowledge of OWASP Top 10, network security, and multi-OS environments.
- Familiarity with frameworks and regulations: ISO 27001, PCI DSS, GDPR, NIS2.
Behaviours & Competencies
- Excellent time-management, prioritisation, and organisational skills.
- Strong analytical thinker with high attention to detail.
- Clear communicator able to explain technical topics to non-technical stakeholders.
- Collaborative team player capable of liaising at technical and business levels.
- Committed to continuous learning and staying ahead of cybersecurity developments.
- Mentorship mindset—guiding and supporting junior team members.
Originally posted on Himalayas